CaveloInstall

Summary

Perform compliance analysis on endpoint vulnerabilities to evaluate adherence to selected compliance frameworks and determine associated risks and remediation status.

Inputs

• Compliance Frameworks — Select one or more compliance frameworks to assess vulnerabilities against, such as NIST, ISO 27001, HIPAA, PCI DSS, and SOC 2.
• Severity Threshold — Specify the minimum CVSS (Common Vulnerability Scoring System) base score (default 7) to filter vulnerabilities included in the compliance analysis.
• Include Remediation Status — Boolean flag (default true) to include remediation status and remediation timeline information for each vulnerability in the results.
• Limit — Maximum number of vulnerability results to return, defaulting to 100.

Output shape

a list of vulnerability records enriched with compliance analysis data

Each returned vulnerability includes compliance framework mapping, a compliance risk level derived from CVSS score, and optionally remediation status and remediation timeline. Results are limited by the specified limit parameter and filtered by severity threshold. The compliance frameworks input controls which frameworks are included in the compliance mapping.

Examples

Example 1: Analyze vulnerabilities with CVSS score 7 or higher for NIST and ISO 27001 compliance, including remediation status

Compliance Frameworks=['NIST', 'ISO27001'], Severity Threshold=7, Include Remediation Status=true, Limit=50